bjoern-cusatum

We managed to fix this by contacting support, there was a slight problem with an existing SSL certificate.

You need to set a change account for Active Directory. This is done in the scan config for that AD. Without setting a change account, automation is not working and will always fail. Same goes for fileserver changes.

Hi, there is no way that a password can be randomly generated at the moment. But that's not the basic idea behind the password reset feature: your helpdesk should reset the password and leave the checkmark for the option that the user has to change his password when logging in the next time. Then he tells the user…

Hi, please post your Feature Request in here: Access Rights Manager (ARM) Feature Requests That way the community can also vote on them and the whole process is explained and shown. Cheers Björn

Since it's a single server, this shouldn't be an issue. But I've seen systems stuck in some weird states where a simple service restart helped. Have you tried restarting the ARM Service?

Hey Kip, SQL 2019 will work. SQL commands haven't changed and no special features are needed. Microsoft won't do any drastic changes here. Cheers Björn

ARM does not manage local accounts on servers. You can create or delete local accounts. But they are visible when it comes to permissions: They are shown in the permissions view and in reports. Plus you could remove them from the permissions, but not add them. They are also important when it comes to nesting of groups and…

Hi, the start page of ARM always shows some sort of reports. This is, as of now, not configurable. Only Logga reports can be deactivated. Since the user only needs to set OOF on mailboxes, make sure the data owner configuration limits his ressources. Create a category like "OOF Users" and configure it somewhat like this:…

Generic Ressources via Easy Connect are not that... easy... it's very consulting and programing intensive. You have to have a lot of knowledge of what to do (see the manual linked in the License overview of the ARM Configuration UI) and the target system so you can configure the CSV to be correctly interpreted. There's…

Did you rescan after you set the settings? The sorting is the last step of the scan due to performance (would take way too long to sort in the UI when opening it).

Hi, Old mean when you had the 8MAN before, it will use the old path with protected-networks.com. When you do a clean new install, it will use the folder with solarwinds in it. If you selected a Collector (or several) for a ressource, the script needs to be on that (those) Collector server since it can't access the ARM…

Hi Florian, there should be something in the logfiles in %ProgramData%\protected-networks.com\8MAN\log, probably the app8man logfiles since this seems to be a UI crash. Probably best would be to contact customer support with this issue and sending them the logfiles, they can usually help you the best when it comes to…

Hi Marcus, if you don't want to wait 4 weeks for them to clear automatically, add the following to the pnServer.config.xml: <jobs.history.failed type="System.Int32">28</jobs.history.failed> 28 (days) is the default value. Set it to 1, restart the service and wait for the normal database cleanup job to run automatically, it…

Hi, since 2 out of 8 work, this most probably is either a firewall problem or a GPO problem. Firewall: if the firewall is enabled, the pre-defined Microsoft rule "Remote Event Log Management (RPC)" must be enabled. Or disable the firewall on those DCs. This should also be visible in the 8MAN/ARM Logbook in the Logga Status…

Hi Marcus, WebUI -> Analyze -> Directories -> File System Permissions Select the folder you want to now and when the grid has loaded, just filter the access rights to "Full Control" only and either export it to Excel or create the report. Cheers Björn

Hi, regarding your questions: - Do ARM work only on unstructured data? It doesn't matter if the data is structured or not, ARM will work with it. See it as a software changing the way you adminstrate your ressources. - Can ARM manage permissions on files and folders taken on a local file system on a server? ARM does not…

ARM by default assumes that an attribute will be loaded for users (which is the common case). To make an attribute available for other classes than User, add the following to each desired attribute: <ApplicableObjectClasses type="System.String">User,Computer,Group</ApplicableObjectClasses> Note: you have to insert every…

The template is basically the blueprint for the WebUI to generate the form, that's why the approvers/admins don't see the attributes when editing the request. The mailbox part, afaik, does currently not support this parameter. How are your mailboxes split over the databases? Is there maybe a rule which can be applied by…

They are all here: Documentation for ARM

Great, great tool! What customers have been waiting for Love the simplicity! Didn't read the instructions and got my mind blown by the autocomplete! (which you mentioned in the instructions) Good job! Happy happy, joy joy! Björn

Hi, since you installed both needed components I have just a simple question: have you connected the Collector to the ARM Server by adding it in the configuration under the Collector options? They won't connect automatically but needs to initialized manually. If not, just add it by entering the server name (shortname is…

The error is not coming from ARM but your script. You're defining $args[1] = $samaccountname $samaccountname is empty, it's nowhere defined. $args[1] does not exist and you define it as the empty $samaccountname value. {samaccountname} is actually $args[0] since it starts counting at 0. The correct line must be:…

I compared the text with one of February 5th, no difference. I guess that date gets updated automatically when then all text get updated from a (potential) staging system (usually this is something a company has for texts/websites)

When you run a "Who has access where?" report on a folder it will report on all child directories (if scanned properly). If not, you either have the level set differently: 0 (Zero) would mean only the selected folder. And/Or have this (default) option active: I would NOT recommend deactivating this. What this does: if it…

Hi, first of all: ARM needs no access to the database, that's way too much. It should be in the Exchange permission group "Organizational Management" to make changes. The search behaviour you describe sounds like a bug in an old 8MAN (old name of ARM) version where the search jumped to the wrong spot due to bad grouping.…

There's apparently a bug in the logbook when numbers smaller than 12 are used (month/day mixup), the correct value is set for the user. Contact SolarWinds customer support and report the UI bug.